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We claim: 



1 . A system for authentication of a party in a transaction conducted over a 
communication network comprising: 

a wallet-sized storage medium containing information uniquely associated 
with said party read by a conventional computer operated by said party as part of 
said transaction; and 

an authentication server remote from said computer that receives said 
stored information and a personal code entered by said party from said 
conventional computer as part of said transaction and authenticates said party to 
said transaction upon matching of said stored information with said personal code 
based upon information in a preexisting data base. 

2. The system of Claim 1 wherein said stored information is transmitted from 
said conventional computer to said authentication server via a computer of a second party 
to said transaction. 

3. The system of Claim 2 wherein said personal code is transmitted from said 
conventional computer to said authentication server via said computer of said second 
party. 

4. The system of Claim 1 wherein said stored information are one-use tokens. 

5. The system of Claim 1 wherein said stored information is a digital certificate. 

6. The system of Claim 1 wherein said personal information is a password. 
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7. The system of Claim 1 wherein said wallet-sized storage medium is a 
truncated CD. 

8. The system of Claim 1 wherein said stored information comprises at least two 
groups, each of which, upon matching with said personal code by said authentication 
server, authenticates said transaction for a different level of security or authority than 
authentication through said second group. 

9. The system of Claim 1 wherein said user has at least two personal codes that 
may be matched to said stored information, each of which, upon matching with said 
personal code by said authentication server, authenticates said transaction for a different 
level of security or authority than authentication through said second personal code. 

10. A computer program module interfacing with an interactive document- 
generating application, both running on a conventional computer, and providing for: 

a) copying to a document generated by said application information from a 
wallet-sized storage medium read by said conventional, said copied information 
uniquely associated with a user interacting with said application; 

b) prompting for and receiving entry of a personal code of said user; and 

c) transmitting to an authentication server said stored information and said 
personal code. 

1 1 . A process for authentication of a party in a transaction conducted over a 
communication network comprising the steps of: 
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a) reading by a conventional computer a wallet-sized storage medium 
containing information uniquely associated with said party; 

b) prompting for and receiving entry by said conventional computer of a 
personal code of said party; 

c) transmitting to an authentication server said stored information and said 
personal code; and 

d) matching by said authentication server said stored information and said 
personal code based upon information in a preexisting data base. 

12. The process of Claim 1 1 wherein said transmitting step further comprises 
the step of transmitting said stored information from said conventional computer to a 
computer of a second party to said transaction. 

13. The process of Claim 1 1 wherein said transmitting step further comprises the 
step of transmitting said personal code from said conventional computer to a computer of 
said a second party to said transaction. 

14. The process of Claim 1 1 wherein said stored information are one-use tokens. 

15. The process of Claim 11 wherein said stored information is a digital 
certificate. 

16. The process of Claim 1 1 wherein said personal information is a password. 

17. The process of Claim 11 wherein said wallet-sized storage medium is a 
truncated CD. 
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18. The process of Claim 1 1 wherein said stored information comprises at least 
two groups, each of which, upon matching with said personal code by said authentication 
server, authenticates said transaction for a different level of security or authority than 
authentication through said second group. 

19. The process of Claim 1 1 wherein said user has at least two personal codes 
that may be matched to said stored information, each of which, upon matching with said 
personal code by said authentication server, authenticates said transaction for a different 
level of security or authority than authentication through said second personal code. 
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